Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2020-37156

BloodX 1.0 - Authentication Bypass

Description

BloodX 1.0 contains an authentication bypass vulnerability in login.php that allows attackers to access the dashboard without valid credentials. Attackers can exploit the vulnerability by sending a crafted payload with '=''or' parameters to bypass login authentication and gain unauthorized access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

diveshlunker BloodX

  • 1.0affected

References